changeset 8200:9582adbc7d70 quic

Fixed nonce in short packet protection.
author Sergey Kandaurov <pluknet@nginx.com>
date Tue, 10 Mar 2020 18:40:18 +0300
parents 1297dc83a6b9
children 5c66dadb1e34
files src/event/ngx_event_quic.c
diffstat 1 files changed, 3 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/src/event/ngx_event_quic.c
+++ b/src/event/ngx_event_quic.c
@@ -758,7 +758,9 @@ ngx_quic_create_short_packet(ngx_connect
     }
 
     nonce = ngx_pstrdup(c->pool, &pkt->secret->iv);
-    if (pkt->level == ssl_encryption_handshake) {
+    if (pkt->level == ssl_encryption_handshake
+        || pkt->level == ssl_encryption_application)
+    {
         nonce[11] ^= (*pkt->number - 1);
     }